You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Register a free account to unlock additional features at BleepingComputer.com

Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

I have a pop-up blocker running, and often I'll see an MSIE ad-sized window trying to pop up, but it gets squelched. When I check to see what processes are running, IEXPLORER.EXE is always running (I don't use it as my default browser, but I have it on this system because I occasionally need one bit of its functionality). When I end the process, it goes away, but it always comes back.

What malware will do this? I just removed some junk that was being malicious, but there must be something else I can't find.

Description:iexplorer.exe is the executable for a virus that is a variant of the RapidBlaster parasite that downloads and displays advertising from an Internet location. This process should be removed to ensure your personal privacy.

iexplorer.exe RapidBlaster is a task run on Windows startup.When an internet connection is present it periodically connects to its servers to fetch advertising.Typically pop-ups for porn sites.Can download and execute arbitrary unsigned code pointed to by its controlling servers.

RapidBlaster/Rnd is an update which uses pseudo-random filenames.If it fails to contact its server it will just use 'RapidBlaster\rb32.exe' as with older variants.If you remove it, it will reinstall itself using a new name.

Installed with ActiveX drive-by download on affiliate pages, including misleading download links (eg. 'megamovieblaster') and pop-ups.Also can installed by the ISTBar parasite.

Manual removalOpen the Task Manager and end the RapidBlaster process (rb32.exe, or, in the Rnd variant)

Find the key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Runand delete the 'Something lptt01' entry.'Something' will be the same as the filename of the RapidBlaster program - you can now delete the folder containing this.